REMARKS 

In the Official Action mailed March 25, 2004 the Examiner reviewed 
claims 1-5, 7-13, 15-21, and 23-24. Claims 1-5, 7-13, 15-21, and 23-24 were 
rejected under 35 U.S.C. §102(e) as being anticipated by O'Flaherty et al. 
(USPN 6,275,824, hereinafter "O'Flaherty"). 

Rejections under 35 U.S.C. §102(e) 

Independent claims 1, 9, and 17 were rejected as being anticipated by 
O'Flaherty. Applicant respectfully points out that O'Flaherty teaches restricting 
access to data in a database by creating different views based upon privacy 
parameters for different items in the database (see O'Flaherty, Abstract and 
FIG. 2A. 

In contrast, the present invention is directed to creating two types of 
database administrator. A first type of database administrator is a "security 
officer" who can perform administration operations on sensitive objects, and a 
second type of database administrator, who is not security officer, is restricted from 
performing administrative functions on sensitive objects (see FIG. 1 and page 5, 
line 23 to page 9, line 1 of the instant application). By creating two types of 
database administrators, the present invention provides the capability to store 
sensitive data in encrypted form, while minimizing the number of database 
administrators who can access the encrypted data (see page 1, line 26 to page 3, line 
2 of the instant application). 

While the system of O'Flaherty can control external accesses to the 
database, the system of O'Flaherty does not control access by a rogue administrator 
as does the present invention (see page 8, lines 14-17 of the instant application). 

There is nothing within O'Flaherty, either explicit or implicit, which 
suggests creating two types of database administrator, a first type who is a "security 
officer" who can perform administration operations on sensitive objects, and a 
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second type who is not security officer and is restricted from performing 
administrative functions on sensitive objects. 

Accordingly, Applicant has amended independent claims 1, 9, and 17 to 
clarify that the present invention creates two types of database administrators. 
Applicant has also amended claims 1-4, 7-12, 15-20, and 23-24 to remove 
ambiguities and to correct antecedent basis. No new matter has been added. 

Applicant has also added new claims 25-48 for review. These new claims 
also include limitations that describe the two types of administrators. 

Hence, Applicant respectfully submits that independent claims 1, 9, 17, 25, 
33, and 41 as presently amended are in condition for allowance. Applicant also 
submits that claims 2-5 and 7-8, which depend upon claim 1, claims 10-13 
and 15-16, which depend upon claim 9, claims 18-21 and 23-24, which depend 
upon claim 17, claims 26-32, which depend upon claim 25, claims 34-40, which 
depend upon claim 33, and claims 42-48, which depend upon claim 41, are for the 
same reasons in condition for allowance and for reasons of the unique combinations 
recited in such claims. 
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CONCLUSION 

It is submitted that the present application is presently in form for 
allowance. Such action is respectfully requested. 

Respectfully submitted, 

By 

A. Richard Park 
Registration No. 41 ,241 

Date: April 26, 2004 

A. Richard Park 

PARK, VAUGHAN & FLEMING LLP 
508 Second Street, Suite 201 
Davis, CA 95616-4692 
Tel: (530) 759-1661 
FAX: (530) 759-1665 
richard@parklegal.com 
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